Date filter _dateparsefailure

Elastic Stack Logstash
1

Hi,

I am using ELK GA 5.0.0. I am consuming from Kafka and I have a message in which has date like 05-Feb-2018:10:39:33 +0000. I used grok filter to parse date like;

date {
	match => [ "datetime", "dd-MM-YYYY:HH:mm:ss Z" ]
	timezone => "GMT"
	target => "@timestamp"
}

but it is creating _dateparsefailure. I refered this page https://github.com/logstash-plugins/logstash-patterns-core/blob/master/patterns/grok-patterns to create the pattern. Why is this error happening and how can I fix this?

Thanks.

2

Use MMM to match the name of a month, not MM.

I refered this page https://github.com/logstash-plugins/logstash-patterns-core/blob/master/patterns/grok-patterns to create the pattern.

Really? Grok patterns have nothing to do with date patterns.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.